This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft File: -Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft (raw, json) Hash identifier: PbjuEXvaz7aE0cH/xuD9lkP93rNJ5YD4GueMMr/iL+U= Subject key identifier: B0:65:54:85:8A:D8:B2:3E:24:DC:50:A0:79:4F:6F:49:F7:C7:EA:67 Authority key identifier: F8:18:FC:98:8E:C7:03:2C:3E:2C:6A:48:A5:54:98:AB:7C:D5:65:FD Certificate issuer: /CN=A91B0F3F/serialNumber=F818FC988EC7032C3E2C6A48A55498AB7CD565FD Certificate serial: 0A99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft Manifest number: 0A7A Signing time: Thu 18 Dec 2025 19:15:06 +0000 Manifest this update: Thu 18 Dec 2025 19:15:06 +0000 Manifest next update: Thu 25 Dec 2025 19:15:06 +0000 Files and hashes: 1: -Bj8mI7HAyw-LGpIpVSYq3zVZf0.crl (hash: E5U9jgJVf5sVeslbK7Y0Bjidg0izYojr5ILmAtiPPcg=) 2: 59E4B0A81B9211F0A5D50649C4F9AE02.roa (hash: 4uAphyYn6AbiifiDtaxCom6jwozyhzmoBVY1cw2irI4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.crl rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 19:15:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2713 (0xa99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0F3F, serialNumber=F818FC988EC7032C3E2C6A48A55498AB7CD565FD Validity Not Before: Dec 18 19:15:06 2025 GMT Not After : Dec 25 19:15:06 2025 GMT Subject: CN=694452ba-cb44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ff:23:15:90:81:fd:02:d0:3a:15:de:10:dd: 1f:85:c4:c5:5f:83:4d:a7:d2:4d:61:e0:c5:5f:c8: d8:f5:df:d5:5a:5f:f1:1c:37:57:f7:9d:b9:3f:dd: 91:23:c5:ec:9c:be:cd:27:9d:9c:fa:6f:bc:8b:50: 58:1e:ee:98:be:2f:35:ac:db:ee:89:06:76:15:8c: 59:d5:b9:48:c4:08:ec:80:84:0f:1f:b2:51:c4:5c: e4:13:8e:6a:e9:69:e0:12:2b:3f:4a:5e:54:32:49: ec:52:c9:f3:8c:4a:a1:31:71:ff:22:28:64:55:38: d0:44:ee:b8:03:b3:b4:bb:42:04:21:8a:72:15:76: 43:1c:87:6d:e5:33:c1:ca:63:03:f7:83:b3:68:61: ab:86:2b:f9:bb:60:c8:26:f8:4a:f7:b9:d1:b3:cc: c5:67:c5:4a:f7:dc:19:b5:a2:33:2c:0e:34:55:8c: 4f:08:68:92:5e:22:d9:58:42:f4:19:74:03:fe:0c: 69:bb:21:7c:4d:7a:81:a0:b1:1b:90:d5:af:b0:f3: 38:dc:63:62:3d:e8:a0:21:4b:c0:6b:da:b5:51:38: a2:19:ae:e8:32:85:43:b5:b0:16:a1:8a:53:3d:42: e1:29:8d:83:e1:20:1b:ef:d1:d1:23:7d:3f:f1:61: f6:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:65:54:85:8A:D8:B2:3E:24:DC:50:A0:79:4F:6F:49:F7:C7:EA:67 X509v3 Authority Key Identifier: keyid:F8:18:FC:98:8E:C7:03:2C:3E:2C:6A:48:A5:54:98:AB:7C:D5:65:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:a6:77:53:6b:0d:24:41:1f:62:60:72:03:7e:d0:20:f7:4a: 37:a9:23:1a:ee:1b:eb:04:46:90:09:dc:45:b2:23:bb:97:09: 39:31:d0:be:c4:5e:46:ac:4d:25:b1:5f:86:db:8d:4b:aa:9a: 61:ab:71:62:db:1f:27:95:e1:60:c2:f2:03:26:df:a7:98:52: 6a:c5:32:d9:b9:8d:cf:56:dd:91:58:61:be:84:40:74:6f:4f: 89:3a:6a:a7:6a:4d:dd:be:2c:05:53:47:a9:a1:84:5d:c6:08: c9:0d:e0:75:39:05:94:fa:b5:99:2a:66:08:dd:ed:b4:d2:48: aa:56:a0:4c:43:30:ae:bb:5d:d2:3e:04:b2:98:ff:78:57:9a: 8f:a6:38:80:99:b8:07:c0:f8:5b:c0:cc:3e:ad:df:41:65:52: 08:90:e0:e2:12:0c:8a:ee:b4:00:c5:f7:9b:01:5c:f9:72:b9: 4c:ff:95:8a:52:c2:3c:d9:f4:92:63:b5:53:88:f8:6e:ed:52: b8:23:aa:f4:a8:02:f2:92:aa:b2:5f:bd:be:f1:7f:cb:d5:ad: 5a:5a:49:9a:68:b8:d8:0d:03:c8:70:49:c9:84:7b:99:73:67: f4:09:50:c1:66:8d:08:d0:5c:e0:41:4a:fc:76:2c:fa:82:ec: 3c:ea:37:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCpkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBGM0YxMTAvBgNVBAUTKEY4MThGQzk4OEVDNzAzMkMzRTJDNkE0OEE1NTQ5OEFC N0NENTY1RkQwHhcNMjUxMjE4MTkxNTA2WhcNMjUxMjI1MTkxNTA2WjAYMRYwFAYD VQQDDA02OTQ0NTJiYS1jYjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxf8jFZCB/QLQOhXeEN0fhcTFX4NNp9JNYeDFX8jY9d/VWl/xHDdX9525P92R I8XsnL7NJ52c+m+8i1BYHu6Yvi81rNvuiQZ2FYxZ1blIxAjsgIQPH7JRxFzkE45q 6WngEis/Sl5UMknsUsnzjEqhMXH/IihkVTjQRO64A7O0u0IEIYpyFXZDHIdt5TPB ymMD94OzaGGrhiv5u2DIJvhK97nRs8zFZ8VK99wZtaIzLA40VYxPCGiSXiLZWEL0 GXQD/gxpuyF8TXqBoLEbkNWvsPM43GNiPeigIUvAa9q1UTiiGa7oMoVDtbAWoYpT PULhKY2D4SAb79HRI30/8WH24wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLBlVIWK 2LI+JNxQoHlPb0n3x+pnMB8GA1UdIwQYMBaAFPgY/JiOxwMsPixqSKVUmKt81WX9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEYzRi8wOTM3M0FENjc4 QzIxMUVBQkQ3NzIzNTlDNEY5QUUwMi8tQmo4bUk3SEF5dy1MR3BJcFZTWXEzelZa ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1CajhtSTdIQXl3LUxHcElwVlNZcTN6VlpmMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEYzRi8wOTM3M0FENjc4QzIxMUVBQkQ3NzIzNTlDNEY5QUUwMi8tQmo4bUk3SEF5 dy1MR3BJcFZTWXEzelZaZjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4pndTaw0kQR9iYHIDftAg90o3qSMa7hvrBEaQCdxFsiO7lwk5MdC+ xF5GrE0lsV+G241Lqpphq3Fi2x8nleFgwvIDJt+nmFJqxTLZuY3PVt2RWGG+hEB0 b0+JOmqnak3dviwFU0epoYRdxgjJDeB1OQWU+rWZKmYI3e200kiqVqBMQzCuu13S PgSymP94V5qPpjiAmbgHwPhbwMw+rd9BZVIIkODiEgyK7rQAxfebAVz5crlM/5WK UsI82fSSY7VTiPhu7VK4I6r0qALykqqyX72+8X/L1a1aWkmaaLjYDQPIcEnJhHuZ c2f0CVDBZo0I0FzgQUr8diz6guw86jfV -----END CERTIFICATE-----Generated at Fri Dec 19 17:45:20 2025 by rpki-client